DBnmpntw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dbnmpntw.dll
Resource
win10v2004-20240508-en
General
-
Target
dbnmpntw.dll
-
Size
19KB
-
MD5
16e96014b1cc6c0753ff2e8159574a33
-
SHA1
0ef23a8275250450153ec51e9bd2b836c23cd3f6
-
SHA256
7b6951a146c05317590d6adddd49b8ee81d75f7526510e076af5440cca264865
-
SHA512
16a1b9b9bd6216835595994208fd1c63d3ffd4e79908f5cf0bd45dfcf001cc6e25833325d6cb7d4498d456e5c0b3592640c5548e2c2f9005e6fa6031b17b48db
-
SSDEEP
384:0Q3FNK9ZuJfZi5OfMXsw9l+Qg4WzxxyMvWoqcyWmM:V3Fo09ZSOU3y0h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbnmpntw.dll
Files
-
dbnmpntw.dll.dll windows:10 windows x86 arch:x86
7d998538079b974ddaa2e27dccd2b7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_except_handler4_common
_initterm
malloc
free
_amsg_exit
_XcptFilter
getenv
_stricmp
_wgetenv
wcstombs
_vsnprintf
_wcsicmp
_vsnwprintf
memset
kernel32
Sleep
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetComputerNameA
LoadLibraryExW
CreateEventA
WideCharToMultiByte
TransactNamedPipe
FreeLibrary
GetComputerNameW
GetProcAddress
GetOverlappedResult
ReadFile
CancelIo
SetNamedPipeHandleState
SetLastError
WriteFile
PeekNamedPipe
WaitForSingleObject
CreateFileW
ExitThread
MultiByteToWideChar
ResetEvent
GetLastError
CreateFileA
SetEvent
WaitForSingleObjectEx
GetVersionExA
CloseHandle
CreateThread
GetTickCount
Exports
Exports
ConnectionCheckForData
ConnectionClose
ConnectionError
ConnectionErrorW
ConnectionMode
ConnectionObjectSize
ConnectionOpen
ConnectionOpenW
ConnectionRead
ConnectionServerEnum
ConnectionServerEnumW
ConnectionStatus
ConnectionTransact
ConnectionVer
ConnectionWrite
ConnectionWriteOOB
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ